Vulnerability in Avg Antivirus Plus Firewall
CVE-2006-6619
AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, which allows local users to bypass the product's controls on a process by spoofing the (1) ImagePathName, (2) CommandLine, and (3) WindowTitle fields in the PEB.
EPSS: 0.010 (58.7th percentile) — read the EPSS interpretation.
Affected products
- Avg Antivirus_plus_firewall — versions 7.5.431
- Comodo Comodo_personal_firewall — versions 2.3.6.81
- Filseclab Personal_firewall — versions 3.0.8686
- Infoprocess Antihook — versions 3.0.23
- Soft4ever Look_n_stop — versions 2.05p2
- Symantec Sygate_personal_firewall — versions 5.6.2808
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MISC)